GeoTechNexus Privacy Policy

Effective Date: February 27, 2026
Last Updated: February 27, 2026

Introduction and Commitment

GeoTechNexus is a geopolitical and technology‑risk intelligence service operated by GeoNexis LLC. Given the sensitive nature of the topics we cover, including national security, supply‑chain vulnerabilities, sanctions, export controls, and strategic technology developments, we recognize that privacy, confidentiality, and data security are not merely regulatory obligations but fundamental to the trust our clients, sources, and subscribers place in us.

This Privacy Policy explains how we collect, use, store, protect, and share personal data. It reflects our commitment to compliance with global data protection standards, including the European Union General Data Protection Regulation (GDPR), the UK Data Protection Act 2018 (as amended), the California Consumer Privacy Act (CCPA) and other U.S. state privacy laws, and emerging frameworks in Africa, Asia, and Latin America.

Core Principles:

• Client confidentiality – We protect the identity and engagement details of all clients, especially those operating in politically sensitive or contested markets.
• Source protection – Contributors, analysts, and confidential sources who provide intelligence are anonymized and shielded from disclosure.
• Data minimization – We collect only the data necessary to deliver our services and maintain compliance.
• Transparency and control – You have rights to access, correct, delete, and control how your data is used.
• Security by design – All systems and processes embed privacy and security from the outset.

1. Who We Are and How to Contact Us

Data Controller:
GeoNexis LLC
Operating as: GeoTechNexus
Address: Bahnhofstrasse 3

Belp 3123, Switzerland

Tel: +41 78 7417097
Email: privacy@geotechnexus.com
Website: www.geotechnexus.com

For all privacy‑related inquiries, data subject requests, or concerns about how your personal data is handled, please contact us at privacy@geotechnexus.com.

If you are located in the European Union or United Kingdom and believe we have not adequately addressed your concerns, you have the right to lodge a complaint with your local data protection authority.

2. What Personal Data We Collect

We collect personal data in the following contexts:

2.1 Website Visitors and Newsletter Subscribers

• Contact information: Name, email address, organization, job title, country/region.
• Account credentials: Username, password (encrypted), and account preferences for registered users.
• Usage data: IP address, browser type, device information, pages visited, time spent on site, referral sources.
• Cookies and tracking technologies: Session cookies, analytics cookies (Google Analytics or similar), and preference cookies. See Section 9 for cookie‑specific details.

2.2 Subscribers and Members

• Billing information: Payment card details (processed by third‑party payment processors such as Stripe; we do not store full card numbers), billing address, invoice history.
• Subscription data: Membership tier, renewal dates, access logs for premium content, download history.
• Communications: Email correspondence, support requests, feedback, and survey responses.

2.3 Consulting and Advisory Clients

• Engagement details: Organization name, contact persons, project scope, deliverables, and contractual terms.
• Confidential project data: Information provided by clients for custom research, risk assessments, scenario modeling, or advisory services. This may include proprietary business data, supply‑chain information, or strategic plans.
• Meeting records: Notes from briefings, workshops, and consultations (stored securely and shared only with authorized personnel).

2.4 Sources, Contributors, and Analysts

• Identity information: Name, professional background, areas of expertise, and contact details (where disclosed).
• Anonymized contributions: For confidential sources, we collect only the minimum information necessary to validate expertise and do not retain identifying details in published research or client deliverables.
• Contractual and payment data: For named contributors, we collect payment information and contractual terms as required.

2.5 Event Attendees and Webinar Participants

• Registration data: Name, email, organization, job title, and country.
• Participation data: Attendance records, questions submitted, and post‑event survey responses.

3. How We Use Your Personal Data

We process personal data for the following purposes, based on lawful grounds under GDPR and equivalent regulations:

3.1 Service Delivery (Contractual Necessity)

• Providing access to research reports, alerts, briefings, and dashboards.
• Processing subscriptions, managing accounts, and delivering purchased content.
• Conducting consulting engagements, advisory projects, and custom research.
• Organizing and hosting events, webinars, and executive briefings.

3.2 Communication and Marketing (Consent or Legitimate Interest)

• Sending newsletters, product updates, and research alerts (with your explicit consent).
• Notifying subscribers of new reports, membership benefits, or upcoming events.
• Responding to inquiries, support requests, and feedback.

You may withdraw consent or opt out of marketing communications at any time by clicking “unsubscribe” in our emails or contacting privacy@geotechnexus.com.

3.3 Analytics and Service Improvement (Legitimate Interest)

• Analyzing website usage, content engagement, and user behavior to improve our platform and research offerings.
• Conducting surveys and feedback requests to enhance service quality.
• Monitoring system performance, detecting fraud, and preventing abuse.

3.4 Legal and Regulatory Compliance (Legal Obligation)

• Complying with applicable laws, including tax, accounting, anti‑money laundering, export control, and sanctions regulations.
• Responding to lawful requests from government authorities, courts, or regulators (see Section 5 for our approach to such requests).
• Maintaining records as required by law or professional standards.

3.5 Source and Client Confidentiality (Vital Interest and Legitimate Interest)

• Protecting the identity and safety of confidential sources, contributors, and clients operating in high‑risk environments.
• Anonymizing and aggregating data to prevent identification in published research.

4. Who We Share Your Data With

GeoTechNexus does not sell, rent, or trade personal data to third parties. We share data only in the following limited circumstances:

4.1 Service Providers and Processors

We engage trusted third‑party processors to support our operations. All processors are bound by data processing agreements (DPAs) and must comply with GDPR, CCPA, and equivalent standards.

• Payment processors: Stripe (for credit card and subscription billing).
• Email and communication platforms: Mailchimp, SendGrid (for newsletters and transactional emails).
• Web hosting and cloud infrastructure: AWS, Microsoft Azure, etc. (for secure data storage and platform hosting).
• Analytics tools: Google Analytics (with IP anonymization enabled) or privacy‑focused alternatives.
• Customer relationship management (CRM): For managing client relationships and support requests.

4.2 Legal and Regulatory Disclosures

We may disclose personal data if required by law, court order, or government authority. However, we commit to the following safeguards:

• Notification: Where legally permissible, we will notify affected individuals or clients before disclosing their data.
• Minimal disclosure: We provide only the data specifically required by the legal request, not broader datasets.
• Challenge where appropriate: If a data request is overly broad, lacks proper legal basis, or threatens source confidentiality, we will seek legal counsel and challenge the request where feasible.
• Transparency reporting: We publish an annual transparency report detailing the number and nature of government or regulatory data requests received (aggregated and anonymized).

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets involving GeoNexis LLC or GeoTechNexus, personal data may be transferred to the acquiring entity. We will notify affected individuals and ensure the new entity honors this Privacy Policy or provides equivalent protections.

4.4 Anonymized and Aggregated Data

We may share anonymized, aggregated data with partners, research collaborators, or in published reports. Such data cannot be used to identify individuals.

5. Client and Source Confidentiality Protections

Given the geopolitical nature of our work, GeoTechNexus implements enhanced confidentiality measures for clients and sources:

5.1 Client Anonymity

• Consulting engagements: Client names, project details, and deliverables are kept strictly confidential unless the client explicitly authorizes disclosure.
• Subscription anonymity: Member lists and subscriber identities are not shared externally or used for marketing by third parties.
• Secure communications: We offer encrypted email (PGP/GPG) and secure file‑transfer options for sensitive exchanges.

5.2 Source Protection

• Unnamed contributors: Confidential sources are never identified in research outputs, briefings, or databases. We use generic descriptors (e.g., “a former government official,” “a semiconductor industry executive”) that prevent identification.
• Access restrictions: Only authorized GeoTechNexus personnel with a legitimate need to know have access to source identities.
• No forced disclosure: We will resist legal requests to disclose source identities to the fullest extent permitted by law, including seeking protective orders and engaging legal counsel.
• Data isolation: Source identity data is stored separately from research content, with restricted access controls and encryption.

5.3 High‑Risk Jurisdictions

For clients and sources operating in regions with heightened political risk, surveillance, or repression, we:

• Minimize data collection to only what is operationally necessary.
• Offer anonymous payment methods where feasible.
• Store data in jurisdictions with strong privacy protections (EU, Switzerland, or other GDPR‑compliant regions).
• Provide secure communication channels (Signal, ProtonMail, or equivalent).

6. Data Security and Protection Measures

GeoTechNexus employs industry‑leading security practices to protect personal data:

6.1 Technical Safeguards

• Encryption: Data at rest is encrypted using AES‑256 or equivalent standards. Data in transit is encrypted via TLS 1.2 or higher.
• Access controls: Role‑based access control (RBAC) ensures that personnel can access only the data necessary for their role.
• Multi‑factor authentication (MFA): Required for all staff and contractor accounts accessing internal systems.
• Secure hosting: Data is hosted on servers in GDPR‑compliant jurisdictions with strong physical and network security.
• Regular security audits: We conduct annual penetration testing, vulnerability assessments, and compliance reviews.

6.2 Organizational Safeguards

• Staff training: All employees and contractors receive mandatory data protection and confidentiality training.
• Confidentiality agreements: Staff and contractors sign non‑disclosure agreements (NDAs) covering client and source data.
• Incident response plan: We maintain a documented breach response plan, including notification procedures for affected individuals and regulators.
• Data Protection Officer (DPO): A designated DPO (or equivalent role) oversees compliance and serves as the primary contact for privacy matters.

6.3 Data Breach Notification

In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will:

• Notify affected individuals within 72 hours (as required by GDPR).
• Notify relevant data protection authorities (if legally required).
• Provide clear information about the nature of the breach, data affected, and steps being taken to mitigate harm.
• Offer support, such as credit monitoring or identity protection services, where appropriate.

7. Data Retention and Deletion

We retain personal data only as long as necessary for the purposes outlined in this policy or as required by law.

7.1 Retention Periods

• Website visitors and newsletter subscribers: Email addresses and preferences are retained until you unsubscribe or request deletion.
• Active subscribers and members: Account and billing data are retained for the duration of your membership and for up to 7 years thereafter for accounting, tax, and legal compliance purposes.
• Consulting clients: Engagement records and deliverables are retained for up to 7 years post‑project for contractual, legal, and professional liability purposes.
• Confidential sources: Identity data is deleted or anonymized as soon as it is no longer needed to validate the source or protect their safety. Published research contains no identifying information.
• Event attendees: Registration data is retained for up to 2 years for event management and follow‑up communications.

7.2 Secure Deletion

When data is no longer needed, we securely delete or anonymize it using methods that prevent recovery (e.g., cryptographic erasure, secure overwriting).

8. Your Rights Under GDPR and Other Privacy Laws

You have the following rights regarding your personal data:

8.1 Right to Access

You may request a copy of the personal data we hold about you, including details on how it is used and with whom it is shared.

8.2 Right to Correction

You may request correction of inaccurate or incomplete personal data.

8.3 Right to Deletion (“Right to Be Forgotten”)

You may request deletion of your personal data, subject to legal or contractual obligations that require retention (e.g., accounting records, contractual agreements).

8.4 Right to Restrict Processing

You may request that we limit how we use your data in certain circumstances (e.g., while a correction request is being processed).

8.5 Right to Data Portability

You may request a machine‑readable copy of your data for transfer to another service provider.

8.6 Right to Object

You may object to processing based on legitimate interests (e.g., marketing) or automated decision‑making.

8.7 Right to Withdraw Consent

Where processing is based on consent (e.g., marketing emails), you may withdraw consent at any time without affecting the lawfulness of prior processing.

8.8 How to Exercise Your Rights

To exercise any of these rights, contact us at privacy@geotechnexus.com. We will respond within 30 days (or as required by applicable law). If we cannot fulfill your request, we will explain why.

9. Cookies and Tracking Technologies

GeoTechNexus uses cookies and similar technologies to improve user experience and analyze site usage.

9.1 Types of Cookies We Use

• Essential cookies: Required for site functionality (e.g., session management, authentication).
• Analytics cookies: Track site usage and help us improve content and navigation (e.g., Google Analytics with IP anonymization).
• Preference cookies: Remember your settings and preferences (e.g., language, region)

We do not use third‑party advertising cookies or engage in behavioral tracking for ad targeting.

9.2 Cookie Consent and Control

When you first visit our site, you will see a cookie banner allowing you to accept or reject non‑essential cookies. You can change your preferences at any time via the cookie settings link in our website footer.

You can also manage cookies through your browser settings. Note that disabling essential cookies may limit site functionality.

10. International Data Transfers

GeoTechNexus operates globally and may transfer personal data across borders to fulfill our services.

10.1 GDPR Compliance for Cross‑Border Transfers

When transferring data outside the European Economic Area (EEA) or UK, we ensure adequate protections through:

• Standard Contractual Clauses (SCCs): Approved by the European Commission.
• Data Processing Agreements (DPAs): With all third‑party processors.
• Data hosting in compliant jurisdictions: We prioritize hosting in the EU, Switzerland, or other jurisdictions recognized as providing adequate data protection.

10.2 U.S. and Other Jurisdictions

For clients and sources in the U.S., Africa, Asia, or Latin America, we comply with applicable local privacy laws (CCPA, LGPD, POPIA, etc.) and apply equivalent protections to those required under GDPR.

11.Children’s Privacy

GeoTechNexus services are not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have inadvertently collected data from a child, we will delete it promptly.

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or service offerings. When we make material changes, we will:

• Post the updated policy on our website with a new “Last Updated” date.
• Notify active subscribers and members via email.
• For significant changes, request renewed consent where required by law.

We encourage you to review this policy periodically.

13. Compliance and Certification

GeoTechNexus commits to compliance with:

• EU General Data Protection Regulation (GDPR)
• UK Data Protection Act 2018 (as amended by the Data Use and Access Act)
• California Consumer Privacy Act (CCPA) and other U.S. state privacy laws
• Brazil’s Lei Geral de Proteção de Dados (LGPD)
• South Africa’s Protection of Personal Information Act (POPIA)
• Emerging privacy frameworks in Asia, Latin America, and the Middle East

We conduct regular compliance audits, staff training, and third‑party assessments to maintain these standards.

14. Contact and Further Information

For questions, concerns, or to exercise your data rights, contact:

GeoTechNexus Privacy Team
Email: privacy@geotechnexus.com
Address: Bahnhofstrasse 3, Belp 3123, Switzerland

If you believe we have not adequately addressed your concern and you are located in the EU or UK, you may lodge a complaint with your local supervisory authority:

• EU residents: https://dataprivacymanager.net/list-of-eu-data-protection-supervisory-authorities-gdpr/#content
• UK residents: Information Commissioner’s Office (ICO) – org.uk

GeoTechNexus is committed to protecting your privacy, securing your data, and earning your trust. In a world where geopolitical intelligence can carry significant consequences, we take confidentiality and data protection as seriously as the analysis we provide.